my issue with adding this type of functionality is the amount of resources 
necessary. We are not simply talking an end point or an encrypt/decrypt schema 
here. SSL VPN's like Netscreen (Neoteris) have rather large management 
interfaces, much bigger footprint and serve communications via HTTPS. The 
overhead is much bigger than simply a protocol.

There is a reason why a Netscreen firewall is a firewall and the Netscreen SA 
are separate.

Plus I don't like the idea of running a web server exposed to the 
world....makes me feel oookey....

again just my opinion...

Quoting David Rodgers <david dot rodgers at kdsi dot net>:

> >Fair opinion, but arguable that if m0n0 does ipsec, why not SSL vpn's?
> > 
> And to add to this M0n0 does support both pptp and ipsec ... why not one
> more?
> 
> I personally believe that the firewall and the vpn concentrator should
> be seperate devices but most of the world tends to disagree so ....
> 
> David
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
> 


-- 
Chet Harvey
Pitbull Technologies <http://www.pittech.com/> 
Protecting your Digital Assets
703.407.7311